cisco-sa-ISR4461-gKKUROhx: Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability
First published: Thu Sep 24 2020(Updated: )
A vulnerability in the packet processing of Cisco IOS XE Software for Cisco 4461 Integrated Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect processing of IPv4 or IPv6 traffic to or through an affected device. An attacker could exploit this vulnerability by sending IP traffic to or through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISR4461-gKKUROhx This advisory is part of the September 24, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 25 Cisco Security Advisories that describe 34 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | ||
| Cisco 4441 Integrated Services Router |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-ISR4461-gKKUROhx?
The severity of cisco-sa-ISR4461-gKKUROhx is classified as high due to the potential for denial of service.
How do I fix cisco-sa-ISR4461-gKKUROhx?
To fix cisco-sa-ISR4461-gKKUROhx, update your Cisco IOS XE Software to a version that addresses this vulnerability.
What devices are affected by cisco-sa-ISR4461-gKKUROhx?
The devices affected by cisco-sa-ISR4461-gKKUROhx are Cisco 4461 Integrated Services Routers running vulnerable versions of Cisco IOS XE Software.
Can cisco-sa-ISR4461-gKKUROhx be exploited remotely?
Yes, cisco-sa-ISR4461-gKKUROhx can be exploited remotely by unauthenticated attackers.
What type of attack does cisco-sa-ISR4461-gKKUROhx allow?
cisco-sa-ISR4461-gKKUROhx allows attackers to cause a denial of service (DoS) by forcing the affected device to reload.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe
- canonical/cisco 4441 integrated services router